pub(crate) fn entity_selector_advanced_permission_expr() -> Result<PermissionExpr, PermissionKeyError>